HIGH Severity CVEs

In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. Thi

In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This coul

In f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper locking. This could lead

In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check. This could le

In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing b

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 is vulnerable to SQL injection. A remote attacker could send speci

Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via

Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corru

In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds chec

In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. Thi

In download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions

In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local

In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinu

In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to improper

In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write d

In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to

A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an at

This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and

In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lead

In impeg2d_mc_fullx_fully of impeg2d_mc.c there is a possible out of bound write due to missing bounds check. This could

In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type co

In the Linux kernel, the following vulnerability has been resolved: i40e: fix race condition by adding filter's interme

In the Linux kernel, the following vulnerability has been resolved: virtio_net: Add hash_key_length check Add hash_key

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Lock XArray when getting entries for t

In the Linux kernel, the following vulnerability has been resolved: mm/thp: fix deferred split unqueue naming and locki

In the Linux kernel, the following vulnerability has been resolved: iio: gts-helper: Fix memory leaks for the error pat

In the Linux kernel, the following vulnerability has been resolved: NFSD: Never decrement pending_async_copies on error

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix slab-use-after-free in scmi

In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out of memory ac

In the Linux kernel, the following vulnerability has been resolved: media: mgb4: protect driver against spectre Freque

In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The curr

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix response handling in iwl_mv

In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisc_tree_reduce_backlog on TC_H_R

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_api: fix xa_insert() error path in t

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tric

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winn

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tric

Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which e

In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions t

In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check. Thi

In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch.

Tenda W30E v2.0 V16.01.0.8 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows

Tenda W9 v1.0.0.7(4456) was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows att

Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Popup Window Maker easy-popup-lightbox-maker allows Stored

Cross-Site Request Forgery (CSRF) vulnerability in mikeage Hebrew Date hebrewdates allows Stored XSS.This issue affects

Cross-Site Request Forgery (CSRF) vulnerability in Woopy Plugins SmartLink Dynamic URLs smartlink-dinamic-urls allows St

Cross-Site Request Forgery (CSRF) vulnerability in litefeel Flash Show And Hide Box flash-show-and-hide-box allows Store

Cross-Site Request Forgery (CSRF) vulnerability in microkid Custom Author URL author-slug allows Stored XSS.This issue a

Cross-Site Request Forgery (CSRF) vulnerability in Eric Allen APK Downloader apk-downloader allows Stored XSS.This issue

Cross-Site Request Forgery (CSRF) vulnerability in akira1891 UPDATE NOTIFICATIONS update-notifications allows Stored XSS